Security Enhanced Cloud Storage Access Control System Based on Attribute Based Encryption

With the rapid development of Internet cloud computing technology, services such as cloud storage and cloud disk become a user data storage and backup tool. But at the same time, security of user data has also been great threatened. In this condition, a security enhanced cloud storage access control system based on attributes has been designed and implemented. The system generates the access policy on the client side, implements the access control through the XACML framework, stores user data by using symmetric encryption mechanism at first. The attribute-based encryption mechanism is used to protect the small-scale data-symmetric encryption Key, the data stored in the cloud, provides cloud storage users a safe, flexible, fine-grained and scalable access control function. According to the experimental results, the system can meet the functional requirements, provide a secure access control function. It's in line with the design expectations at security and performance.